Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
File: 0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json)
Hash identifier: 255TdDowJxxTJeyk5xvFXo1x894aqq53dQ7QOsxyQZE=
Subject key identifier: F3:5C:7B:2F:F9:74:E1:8D:9E:A4:58:E0:29:E8:10:02:70:F0:18:7C
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Certificate issuer: /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial: 01974FA1093F5D1CEBCD4B4E3E850A2565AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
Manifest number: 098E
Signing time: Sun 08 Jun 2025 13:00:43 +0000
Manifest this update: Sun 08 Jun 2025 13:00:43 +0000
Manifest next update: Mon 09 Jun 2025 13:00:43 +0000
Files and hashes: 1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: oJCMGI407iKY5hsBoVGPDdtWLHCazf/QDbPTmHIhdHA=)
2: sK3ZBrWvjwd-LkmXtEXI8mmDAIM.roa (hash: OKskFb0lNjQYUF2WZOv8rV/0FbI0umbg74GYmLaJ8S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:09:3f:5d:1c:eb:cd:4b:4e:3e:85:0a:25:65:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Validity
Not Before: Jun 8 13:00:43 2025 GMT
Not After : Jun 9 13:00:43 2025 GMT
Subject: CN=f35c7b2ff974e18d9ea458e029e8100270f0187c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:31:8d:7b:ba:e5:43:2f:31:fc:f5:f6:dd:00:
ad:38:c2:bb:04:01:33:39:f4:ce:fa:4a:30:03:b8:
0c:dd:b7:9d:ae:95:db:cb:59:97:6c:de:e9:29:b6:
fa:70:b7:27:35:c4:25:54:ab:00:63:3e:2f:bb:8b:
51:f3:34:7e:87:02:bf:a7:97:22:d3:84:96:1e:7a:
3f:08:e0:37:4a:a2:d7:5d:6d:66:65:34:bf:39:d9:
f6:70:b4:c1:e9:8f:b4:19:83:ce:f1:31:19:bf:0d:
4d:e6:e0:03:9a:54:93:bb:dd:67:56:15:89:3a:2a:
2b:fa:86:7b:41:00:63:3a:eb:ad:d1:c5:72:21:9e:
f9:b4:4d:4c:74:3c:53:e5:74:f7:b2:49:a1:57:b0:
e9:a8:bf:d2:ed:5c:4a:10:de:5a:d3:e8:e6:f2:3b:
74:14:b4:0b:72:15:dc:6e:14:08:54:d0:5f:63:d3:
3e:b9:c4:62:e3:e6:31:ca:7f:39:3e:fe:be:37:ae:
1a:31:c5:72:a8:66:b5:1b:cd:c2:f0:41:dd:d7:59:
c3:54:16:18:f4:1c:ba:46:97:36:20:04:5b:9b:d7:
4f:69:33:f3:0d:00:b6:b2:61:04:5f:92:07:74:44:
1c:7c:15:6d:6b:dd:a2:6e:92:96:ae:25:20:ee:58:
3e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5C:7B:2F:F9:74:E1:8D:9E:A4:58:E0:29:E8:10:02:70:F0:18:7C
X509v3 Authority Key Identifier:
keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:24:e1:cf:85:5c:a7:19:26:4b:14:78:37:d6:10:db:e9:fe:
78:c7:39:9b:57:80:7c:06:60:9f:be:30:84:2e:d9:bb:88:95:
b8:f2:ad:8c:04:a4:e8:84:43:a0:ea:55:d1:25:70:c8:ab:3e:
cf:e7:82:79:95:6d:95:c0:b0:77:79:75:7a:b2:29:83:df:2f:
2b:4e:54:7c:e4:8b:6e:6f:b6:ad:37:df:f2:d8:f6:da:d6:d7:
ac:05:bf:5b:07:0a:72:e5:01:39:b3:d3:b4:a0:c6:d0:37:40:
ae:f5:5d:6f:b4:4a:02:28:08:8e:3d:8b:b7:e2:20:80:9a:11:
ac:dc:99:90:5c:95:b3:87:b6:ca:17:02:07:2c:5f:20:a1:5a:
06:49:f3:06:e2:87:45:6a:c8:56:db:5f:62:00:45:6d:89:9f:
35:18:30:5a:5b:41:c5:37:33:9e:19:61:46:86:8f:d0:ca:e6:
29:77:3f:91:4f:ee:ab:fa:f9:02:3a:08:93:ae:e4:6a:60:24:
a9:65:69:a3:0e:1e:0e:8d:7f:6e:d8:97:24:d3:7c:77:db:c1:
dc:84:f7:7a:64:49:e6:f8:b7:f5:69:ca:45:34:b9:91:b2:20:
9d:bd:97:9a:52:c2:40:89:2c:32:d9:9e:9b:84:06:b9:67:37:
fc:e6:20:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:44:18 2025 by rpki-client